This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217389571/1/3136302e33302e3135302e302f32342d3234203d3e20313531323737.roa
File:                     3136302e33302e3135302e302f32342d3234203d3e20313531323737.roa (raw, json)
Hash identifier:          Hz4dS18EKG3nO7kHSRjqfjz5kQRRG+x2194Q5ytjmb4=
Subject key identifier:   F8:68:4A:A5:4A:46:2B:71:A6:A9:A1:F0:C5:7D:1B:3B:AD:12:30:17
Certificate issuer:       /CN=BE564B2EFF08B30078A1960732464840B104EF35
Certificate serial:       6F27B562C823C98CE7F644ED12D749042A7C109E
Authority key identifier: BE:56:4B:2E:FF:08:B3:00:78:A1:96:07:32:46:48:40:B1:04:EF:35
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BE564B2EFF08B30078A1960732464840B104EF35.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585911217389571/1/3136302e33302e3135302e302f32342d3234203d3e20313531323737.roa
Signing time:             Tue 20 Jan 2026 01:19:11 +0000
ROA not before:           Tue 20 Jan 2026 01:14:11 +0000
ROA not after:            Tue 19 Jan 2027 01:19:11 +0000
asID:                     151277
IP address blocks:        160.30.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585911217389571/1/BE564B2EFF08B30078A1960732464840B104EF35.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585911217389571/1/BE564B2EFF08B30078A1960732464840B104EF35.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BE564B2EFF08B30078A1960732464840B104EF35.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Jan 2026 09:17:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:27:b5:62:c8:23:c9:8c:e7:f6:44:ed:12:d7:49:04:2a:7c:10:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE564B2EFF08B30078A1960732464840B104EF35
        Validity
            Not Before: Jan 20 01:14:11 2026 GMT
            Not After : Jan 19 01:19:11 2027 GMT
        Subject: CN=F8684AA54A462B71A6A9A1F0C57D1B3BAD123017
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:47:df:fb:a1:6a:b9:3c:c4:67:30:e2:8e:c9:
                    40:32:b8:10:ed:65:e8:12:73:22:ef:3a:eb:5b:b7:
                    c4:5d:bf:3e:64:1f:1a:3f:18:30:5d:74:81:be:46:
                    e3:c4:ce:34:f1:08:29:e5:8a:86:fa:c8:05:87:d8:
                    7d:b1:bb:91:dd:27:4a:cc:ca:5d:6c:24:14:44:6e:
                    bc:4a:5b:87:49:44:3e:2d:ee:f8:3f:5f:62:bd:6c:
                    48:56:a6:e7:ce:57:26:d1:b4:c7:c2:a2:de:d1:e7:
                    ee:52:90:87:c3:8a:82:ff:90:c3:9c:9a:cd:9f:72:
                    94:ef:0c:fc:60:0b:68:09:14:8c:d1:07:8b:3c:ce:
                    77:43:5d:11:92:d4:e7:62:2a:d5:a1:fb:ef:2b:b8:
                    0a:11:d8:ce:45:9d:2d:d9:88:b0:09:52:03:ba:74:
                    9c:a1:1a:5b:d8:0c:35:71:1a:8b:dc:6c:e6:54:3f:
                    17:91:29:3c:3c:6c:a2:6b:90:6e:e1:c5:35:4f:13:
                    36:8d:c1:98:54:4e:8c:54:52:82:4f:c6:ca:50:62:
                    d5:65:3f:56:d2:89:64:a7:75:a0:9a:df:11:9a:8f:
                    8b:ab:9a:6e:8b:97:cb:c9:dd:b2:59:90:61:89:4d:
                    e7:85:56:b4:bc:20:69:bd:d3:27:34:33:64:8a:02:
                    89:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:68:4A:A5:4A:46:2B:71:A6:A9:A1:F0:C5:7D:1B:3B:AD:12:30:17
            X509v3 Authority Key Identifier:
                keyid:BE:56:4B:2E:FF:08:B3:00:78:A1:96:07:32:46:48:40:B1:04:EF:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217389571/1/BE564B2EFF08B30078A1960732464840B104EF35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BE564B2EFF08B30078A1960732464840B104EF35.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217389571/1/3136302e33302e3135302e302f32342d3234203d3e20313531323737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.30.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:3b:ac:b5:94:37:9a:7d:a6:14:9a:59:a3:5e:27:40:15:86:
         b5:14:89:f8:e7:b3:f7:23:22:eb:49:4d:f1:a2:26:c2:fd:76:
         f3:77:94:8f:15:29:c0:3b:45:75:07:5c:bd:54:af:bf:48:65:
         b9:07:9c:25:ff:81:f6:bb:4d:f2:98:dc:f7:2e:fc:94:09:98:
         42:6b:6b:f4:f2:f6:e9:37:ef:03:97:b2:67:e7:ce:e7:1f:8a:
         e4:1f:0b:f6:2e:92:1c:07:89:f4:8a:70:4b:32:2b:33:4d:83:
         1d:1e:5a:7f:c8:53:8d:61:ed:c0:bf:3f:2a:28:39:d9:15:d7:
         e2:16:de:2d:60:03:60:f7:5b:b0:d2:fb:97:24:83:a0:36:26:
         8a:2d:88:2d:5b:1c:95:a3:81:f6:2e:f7:fa:46:7f:53:b8:f0:
         3e:d3:9e:77:98:3c:7f:44:b0:73:3a:91:30:1d:31:3e:b8:ea:
         ca:37:d5:3a:e7:96:ba:b2:65:9f:02:21:77:3a:6d:70:5e:68:
         8c:c3:9e:52:e8:f9:f5:67:95:46:38:2f:6c:ff:06:b4:9d:3d:
         fd:db:03:95:14:4d:29:e7:96:e1:5e:f8:69:63:de:27:82:e7:
         7c:fa:11:8e:d5:b3:2d:df:f9:92:6b:03:c4:95:67:a3:a9:4d:
         2c:4f:48:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:23:08 2026 by rpki-client